Privacy Policy

Agility Labs LLC, doing business as Operator AI Systems (“Operator AI Systems,” “we,” “us,” or “our”), operates the website at operatoraisystems.com and the AI-powered services offered through it.

This Privacy Policy applies to our website, our customer dashboard, and the AI-powered social media management services we provide to business customers. By using our services, you agree to the practices described here.

We collect only what we need to run the service. That falls into four categories.

2.1 Account Information

• —Your name
• —Your email address
• —Account credentials and authentication records

2.2 Business Information

• —Business name, business type or vertical, and business address
• —Business phone number and hours of operation
• —Services, pricing, and other operational details you provide so the AI can represent your business accurately

2.3 Social Media Account Tokens

When you connect a social media account, we receive and store the access tokens that authorize us to act on your behalf, along with the account identifiers, page or profile names, and permission scopes you granted. We also receive content and metrics associated with the connected accounts — such as posts, comments, messages, and engagement statistics — where you have authorized that access.

We use these tokens only to perform the actions you have asked us to perform. We do not sell them, and we do not use them to access anything outside the scope you granted.

2.4 Technical and Usage Information

• —IP address, browser type, device type, and operating system
• —Pages viewed, features used, and timestamps of activity
• —Cookies and similar technologies — see our Cookie Policy for detail

2.5 Payment Information

Payments are processed by our payment processor. We receive billing contact details, subscription status, and the last four digits and brand of your payment card. We do not store full payment card numbers on our systems.

We use the information described above for the following purposes:

• —To provide our social media management services — creating, scheduling, publishing, and managing content on the accounts you connect
• —To operate your account — authentication, provisioning, configuration, and support
• —To generate and tailor AI output — using the business information you provide so that content reflects your business accurately
• —To report performance — surfacing engagement and analytics data in your dashboard
• —To bill you — processing subscription payments and any applicable usage charges
• —To communicate with you — service notices, onboarding, billing alerts, and support responses
• —To secure and improve the service — troubleshooting, abuse prevention, and reliability work
• —To meet legal obligations — tax, accounting, and lawful requests

We do not sell your personal information. We do not share your information with third parties for their own independent marketing purposes.

We share information with the service providers below strictly to the extent needed to deliver our services. Each processes data on our behalf under its own terms and privacy policy.

• —Meta Platforms, Inc. (Facebook and Instagram) — to connect your accounts, publish and manage content, and retrieve engagement metrics through the Meta APIs.
• —Supabase — database, authentication, and file storage for account and business data.
• —Vercel — hosting and delivery of our website and application, including standard server and request logs.
• —Resend — transactional and service email delivery.

We may also disclose information where we are legally required to do so, where necessary to protect our rights, or in connection with a merger, acquisition, or sale of assets — in which case we will notify affected customers.

We retain your data for as long as your account is active. Retaining it is what allows the service to keep operating on your behalf — connected accounts stay connected, business context stays available to the AI, and your history stays visible in your dashboard.

When your account is closed or your subscription ends, we delete or anonymize your personal and business data within a reasonable period, except where we are required to retain records for legal, tax, accounting, or fraud-prevention purposes. Social media access tokens are revoked and deleted when you disconnect an account or close your account.

You may request deletion of your personal data at any time. You may also request a copy of the data we hold about you, ask us to correct inaccurate information, or ask us to restrict how we use it.

• —Access — request a copy of the personal data we hold about you
• —Correction — ask us to fix information that is inaccurate or incomplete
• —Deletion — ask us to delete your personal data
• —Disconnection — revoke a connected social media account at any time from your dashboard, or from the settings of the platform itself
• —Opt out of marketing — unsubscribe from non-essential email at any time

We use industry-standard safeguards to protect your information, including encryption in transit, encrypted storage of credentials and access tokens, access controls that limit who on our team can view customer data, and row-level security on our database.

No system is perfectly secure. We cannot guarantee absolute security, but we will notify you without undue delay if a breach affecting your personal data occurs.

Our services are intended for businesses and the adults who operate them. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

We operate in the United States, and our service providers store and process data in the United States. If you access our services from outside the United States, you consent to the transfer and processing of your information in the United States, where data protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. If the changes are material, we will notify account holders by email before the changes take effect. Continued use of the service after an update means you accept the revised policy.

Questions about this policy, or about how we handle your data: